REMARKS 

Applicant respectfully traverses and requests reconsideration. 

As an iniunl matter, claims L 1.7, 15, 19, 23. and 2S have been amended to correct, 
various typographical errors. Applicant respectfully submits that these amendments are believed 
to be as to form only. The Specification has also been amended to correct various typographical 
errors. Applicant respectfully submits that no now matter Has been added to the present 

disclosure i\v fiese amendment;* 

Claims 1, 4-9 and 1 1-15, 17-20, 22-23 and 26-28 stand rejected under 35 U.S.C, § 103(a) 
as being unpatentable over Cheng e? ah in view of Vcnkatesan in further view of ThawtCs "'Web 
Server Certificate-;; 3.x Root Rollover". 

A>; to chum I, Applicant .espec f ;i'i \ eotes tut* Cheng CuC '> f tc't, nte: A\> 
automatically rtdsrectlng eornr-nx^aL *n *)on thi first ->u>i ovm, 1 , o-s*\s e,d d k °>ioaJ 
processing entity to the first prov.ewnu crux <nd 5 thud p:oct<»;n£ catUx ur-v v:U:o< o>Yv 
second processing entity, in respoi^e v detect ng the need t updav >' He The * *Uv< Vctvt 
appears to have equated Cheng *' chem compute: vuh iho clamed fitv. ;r*« exvnp >'),!•; . 
Cheng's service provider computer system and the database therein « nh hiv esauned se*,eud 
processing entity, and ("bong's software vendor computer system wuh *jk chin led taUO 
processing entity. As noted in the cited portion of Cheng, applicable ^■' , ^<iit; a{\Utt> are 
determined by the client computer itself (page 10, lines 3-4; and idc.t^fied t<> - o^: of the eaes t 
computer. The uj>er selects updates to install ftom among those iden:"u.d Vt'i too n-*e* ->elee 
update;- to Install, either the client application or the service provide* o<»mrme: u vs Ke ii>y\vin 
location specified in the database of software updates to connect to the ^otU*<a«. » e::do» c-uspi.tc; 
system and download the associated software updates to the client c-imrute* (p.-.ge ; -n c- j' 
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39). Thus, the cited portions of Cheng do not teach any automatic redirection of communication 
from one set of processing em i ties to another. Thai is. because in Cheng She determination of 
applicable software updates occurs withia the client computer itself (page 10, hues 3 -4), No 
eomm uni cat ion occurs between the firsl processing entity (i.e.. the client computer) and the 
H\.o.,d ^'OvX^sr.c cn:*\ .u> database ot sofUA.ue ^odeuV' ,hcni.; ! Ji:- detera-unatiou 
XcvVnbngh, .k ^.t^.-qucn; establishment of eon in: micnus! betvxee^ sue f~-a proces-mg enuu 
and the third processing entity (i.e., the software vendor computer system) to download the 
selected updai.es is not a redirection oi" communication. For the sake of argument, Applicant 
further' respectfully notes that even if thi& establishment of communication between the Hist 
processing entity and the third processing entity were characterized as a redirection, it still would 
not be automatic; after the applicable updates have been identified, the user must still "| select] 
various software updates tor installing on the client computer" before any such ^redirection" and 
establishment oi communication with the software vendor computer system would occur. 

Applicant respectfully submits that the above deficiencies of Cheng alone render churn 1 
in condition tor allowance. However, to expedite prosecution, Applicant further notes that the 
Office Action has cited Yenkaiesan as teaching providing update complete data which is 
different from the updated data, under control of the third processing entity, for the second 
processing entity. Venkatcsau is directed to a technique tor generating an authentic 
cryptographic signature message and for authenticating such a signature. As noted on page 3 of 
the response fled May 1 L 2UU5, the cited portion of Venkatesan teaches that if a client computer 
establishes an Internet connection to the website of a product manufacturer, a web server can 
generate an installation number, or indicia, and download that, number for storage to the client 
computer. The installation number can then, be used by the manufacturer to uniquely aod 



securely identify the installation when the client computer accesses a web site of the 
manufacturer. Applicant initially notes that, the cited portion of Venkatesan thus appears to teach 
only two, run three, processing entities: that is, the client computer and the web server of ihe 
manufacturer. The Office Action has cited Venkatesaif s "vender 1 " -Office Action, page 3), i.e. 
manufacturer, as being the third processing entity, and a 'Sender related service provider" 5 
{Office Actio;;., page 3} as being the second processing entity. Applicant respectfully .submits 
thai the "vended : alone is not a processing device or processing entity, unlike, for example, a 
computer operating as a web server. As such, VemVaiesan cannot teach providing update 
cor: del:. d„: , ^ S, < - .Pascal t 01/ 1c apo.t^J C/o. .a, del vonf<\ ^' sac Oad s '\icsrv 
entity, for ihe second processing entity, because Vcnkatesan only appears to teach two 
processing entities. Indeed, the Office Action has cited Venkatesan"s "'cookie communication nf 
successfully upoated-dnsiidled software'' on page 3 as leaching this limitation. However. 
Applicant notes thai, aside from the tact that the cookie communication is not of successfully 
updated/installed software and instead is of an installation number itself t col. 14 % lines 45-48 and 
53-56), this communication occurs from the web server to the client computer. As such, it is 
v.s' t pn ^ .a )f * 1 v a 1.1 r «eq<. fv^ *\ „ t„o c ^c * v "\ » 

for the second processing entity. As the Office Action has already equated the second processing 
entity with Vcnkatesarfs 'Vender related service provider" (page 3), Applicant respect folly 
submits thai the data provided is not. "ibr the second processing entity" as required. 

For at least ihe above reasons, Applicant respectfully submits that Veijfaiesan also fails 
to teach what is alleged in the Office Action. 

the OfOee Action further cites Thawte as demonstrating "[publishing! notices and 
[requiring] update of web browsers based upon root [CAJ certificates 1 " (Office Action pages 3 
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and !0}, and asserts that it would have been obvious to one of ordinary skill in the art at the time 
of the invention to implement, the system of Cheng, which admittedly does not. relate to root 
certificates. wrth updating browsers and certificates as new certificates become available as 
found in Thawte\s teaching. Notwithstanding Cheng's other deficiencies as discussed abo-ve, 
Applicant respectfully submits Dun Cheng loaches that a client computer automatically detects 
applicable software vipdat.es (page 3, fines 31-36) while Thawte teaches that a user must 
manually navigate to a designated URL in a written page to obtain updated root OA cert? fictile 
data. In fact, the Thawte reference stales that the browser docs not check any root certificate 
expiration dates. The entire system of Thawte is directed to manual updating of root CA 
certificate data, from the manual navigation to a designated URL to manual installation of the 
new certi ncat<.: data. The actual combination of these two teachings would simply lead to a 
system having automatic detection of applicable software updates, automatic installation of those 
software updates chosen by a user as taught by Cheng, and the capabilities for manual updating 
of root CA. certificate data by a. user as taught by the Thawte article. The combination of these 
disparate ieaturts cannot amount to die claimed invention. 

For at least ail of the above reasons. Applicant respectfully submits that claim 1 is in 

As to claim 12, Applicant respectfully reasserts the relevant remarks made above with 
regard to claim 1, and as such this claim is also in condition for allowance. 

As to. yjastn 23, Applicant respectfully reasserts the relevant rematks m<*de ao<v,c- with 
regard to claim i and further notes that Cheng, inter aha, docs not teach a svss-,.m eompnsmg a 
web server (or any oilier type of processing entity) operative to detect a roe*: to epdu'e v,vb 
certificate data based on a request tor connection from a web browser are other t\pe 
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proeessjr^ en ;!>)■ Cheng ■■ in particular, page 3. lines 3I-.v> teaches that she need for update,* 
is detennined in the following manner, a client, application downloads part of a service provider 
computer system's database of .software update In formation to the client computer, and the client 
("tu! j 1 o<,- i wfj <. t - u utaM_t. hLw^-< ih i '\1 ^ « ^ *-* , r 

relevant to the user's computer. It appears that the "client database" refers to the portion of the 
database of software updates that has been downloaded to the client computer. Accordingly, 
Applicant respectfully submits that while the client computer does communicate with the 
database of software update information, it does not do so during any determination- of a need for 
updates to the client computer. It docs so to download part of the database of software updates, 
but the subsequent determination of whether or not the client computer requires any of those 
updates 10 be installed occurs solely within the client computer, and this determination is not 
made by a web server or any other processing entity. As noted on page 1 G\ lines 3-4, "in the 
preferred embodiment, the analysis [of installed software products and detennination of 
applicable updates] is preferably performed by the clie nt application . . . on the c lient computer."' 
(Emphasis added). Additionally, in view of the discussion hereinabove regarding Cheng's 
fadure to teach both automatic redirection of communication and a second processing entity that 
detects the need to update data lor a first processing entity, Cheng necessarily fails to teach the 
requirement of claim .13 that such a redirection occurs by a web server (or any other processing 
entity) sending H:> a web browser (or any other processing entity; a universal res-mree locator 
associated with the web certificate update controller (or any other processing enniy) to which die 
web browser's communication is being redirected. For at least these reasons. Applicant 
respectfully submits that claim .23 is in condition for allowance. 
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As to claim 28, Applicant initially respectfully reasserts the relevant remarks made above 
with regard to claim I. Additionally, in view of the discussion hereinabove regarding Cheng's 
failure to teach both automatic redirection of communication and a second processing entity that 
detects the rie-;d to update data for a first processing entity, Cheng necessarily tails to teach the 
requirements ;<1 claim 2$ that such a redirection occurs by a web server (or any other processing 
entity) sending to a web browser (or any other processing entity) a universal resource locator 
associated with the processing entity to which the web browser's communication is being 
redirected. For at least these reasons, Applicant respectful!)' submits that claim 2* is in condition 
for allowance. 

The d„iv;.J^!L clamso add cddun>:w! rov.cl and nuu-ohv-.uis suh >.e: -rouer 
c^irnr- but 'K* b\ 05 .miiV.Uftn. elauu 6 seqcire^ thai uete ' ng <t need 10 e;xhne dasa 
isicIjCcs deienn song s,:iuhe* .5 lerm^eoeu tctjuest between the *Va prooes^eg uaus ano" use 
jct-xiiid p'oee.>s;ne. .'uuis incudes a cookie a^oeLitee wth ?iie second procwsino the 
Offve '\c T 'or 'v.s coed V-VLnes.m, v^iisns; "4, Hneo s5-36 a> vaehnt> *his lurjti^'.t . - s 
:io\xese; as ^<\ed i-u rage H 10 the :\^p--nsc r Jed ja.nua:\ 2! 2o<>3, -he cook-.e :aj»m 
\ivkak^n is iij.-rck j u-prw'^enttjtior. to "he hvv 5 uhfinp menhir fh.it «o eermnnne.000 to she 
. -it !t civ.np iV; .X cookie rs ivt as<\i to eeu-rnnne uhedver to update data ACuoidUigh, a; d 
^ d.L-.v. dsog .,001 able has,- c.a.n. ; cianv: <■ :s in condition ab-*v a rice 

VhhUor . \ ehnm ~ :eq«;re\- m pint thai the eiethod of 0 . : au 1 n cicecs de\;i:r-mn g 
v, It. fac~ , ce;t oeeic update should <k>m\ for the fust pfoees^ni.- em-t\ basae" or wbuthe* cool v\ 
!ta\ . beo^ scc^eO b\ ihe first pn -ceding ontiiy from the second and third processing -amnios, 
she OH\t \aier c eited Cheng, page 5, lines 14-4b: Cheng, page 17, lines 20-30 and 49-55, 
\'vok,!:>. ,an, col - -ws 54-5<o and Venkutesan. col. 15, lines 7-15 as leaching th-s hmitation. 
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However, Applicant respectfully submits thai the cited portions of these references appear silent 
as to the above claim limitation, instead, these cited portions teach: a summary of how software 
updating occurs in Cheng's system, but with no mention of cookies to determine if updating 
should occur (Cheng, page 3, lines 14-48); the registration of new users to a service provider 
computer and the use of a data store describing the present operation of a client application, hut 
which is not used to determine i f updating should occur (Cheng, page 1 7, lines 20-30 and 49-55V. 
a cookie that merely represents the installation number that is communicated to a client 
computer, and is not used in the process or determining if any update should occur (Venkatesan, 
col. 14, lines 54-56); and a discussion of different kinds of information for which authentic 
signatures may be generated (Venkaiesan, col 15, lines 7-15). Accordingly, and as depending 
fro;.:! allowable base claim 1 . claim 7 is in condition for allowance. 

Claim v requires that automatically redirecting communication from the first processing 
entity further includes sending, by the second processing entity, a uniform resource locator of the 
third processing entity, to the lirsl processing entity in response to the second processing entity 
detecting the need to update data for the first processing entity. The Oi lice Action has cited 
Cheng, page 3, hoes 23-25 as teaching this limitation. Applicant respectfully reasserts the 
remarks made with regard to claim 23 and notes that, in view of Cheng's failure to teach both 
automatic redirection of communication and a second processing entity that detects the need to 
update data for a first processing entity, Cheng must also fail to teach the above limitation of 
claim 9 in which the second processing entity sending a URL is part of such an automatic 
redirection process. As such, and as depending frum allowable base claim L claim 9 is in 
condition for allowance. 
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Applies? respectfully submits that the claims are in condition lor allowance and that 
mnejy Notice of Allowance be issued in this ease. The Examiner is invited to contact $ 
below-listed attorney if the Examiner believes thai a telephone conference will advance th 
prosecution of this application. 
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Vcdder. Price, Kaufman <sr 1 « ^rv'/ 1 J f , 

222 N. LaSalie Street 

Chicago, Illinois 6060! 

Phone: (312)609-7599 

Fax: (312)609-5005 

Email: creckaiisp@vedderpnce.com 
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